$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa File: d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json) Hash identifier: ro7d1TTYenTqPY9/HZ4sUUfUKzmJaqxAlj+MLVszye4= Subject key identifier: A3:35:88:E3:E1:69:78:88:16:E0:94:A2:3E:D7:CB:C8:E2:B6:68:B1 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A6826015AC6ABA07E9FF63E80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 16509 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:01:5a:c6:ab:a0:7e:9f:f6:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=33f9e2d5-7061-4e22-9553-6aef47b00842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:e9:74:b8:d0:70:46:4f:9f:2c:9c:99:14: 03:50:1c:70:2b:77:07:fb:89:35:27:f1:8a:e4:3d: d5:40:76:f2:c2:6c:ca:02:4a:89:3b:c0:d4:1e:d4: b6:b9:9e:2e:74:61:bf:23:2c:27:d4:32:b6:34:f0: 7e:05:80:99:79:61:db:e4:c1:98:ac:fc:e6:eb:f2: 5c:71:8b:b7:c1:31:d1:ad:df:f2:ab:dc:db:63:de: bd:4b:7c:76:ea:74:5d:2c:3f:aa:13:37:6a:03:a3: 6a:31:f6:40:ab:62:31:3b:d3:27:89:9b:89:4c:24: 3c:85:39:9f:7f:a6:5f:94:42:07:80:69:59:b2:27: 87:a2:e6:41:1b:0b:ba:7b:91:e5:c1:a7:fc:25:3b: 8d:cb:6c:5c:e3:94:5e:48:df:ca:2e:c4:ab:e0:ee: 41:d8:4d:ab:e0:cd:10:06:63:55:a6:e5:bb:cd:4a: 0c:76:b5:c5:5a:0e:54:5b:27:ed:06:29:35:5d:2e: 04:dc:ab:c9:f2:bd:4d:45:b5:23:bc:ca:44:a9:db: ac:10:04:4e:2c:ad:80:58:5d:e0:4f:5e:2c:ce:62: 1f:92:83:25:62:9c:73:3c:78:bb:9c:8f:9c:c2:c5: f7:df:e6:72:79:14:b8:39:64:48:22:d4:2a:cb:2f: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:35:88:E3:E1:69:78:88:16:E0:94:A2:3E:D7:CB:C8:E2:B6:68:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:af:53:e3:c0:ed:08:ad:47:ef:dd:8b:c9:0c:77:12:60:4f: 64:86:c8:f2:ee:39:f1:d9:1f:48:f8:a4:85:6c:a8:46:a8:24: b5:ab:2e:f9:22:e6:5c:e8:1d:b0:09:76:95:78:9a:f5:7e:5e: 44:1e:02:72:67:9c:b0:d1:0d:c8:fe:f7:45:d9:9b:14:82:21: 56:70:d7:f6:e7:f2:5d:99:b4:a5:df:67:cc:12:21:1f:af:f9: 7a:8c:83:37:9f:ae:3a:7f:bc:13:73:1e:9a:8a:72:a1:04:78: 12:32:27:3e:b7:50:34:20:dc:92:0e:b3:dc:da:15:8d:1b:e9: 84:23:0c:c8:2e:a8:fb:ff:42:57:4e:fa:0a:c9:13:88:54:10: 14:98:4b:50:31:9e:48:bc:60:75:22:19:5f:bf:d5:d1:87:31: b0:ca:26:8a:11:af:d4:a3:67:88:f0:52:c8:cf:e8:fb:7c:73: ac:09:65:08:ed:ba:1f:23:68:ed:fc:5d:fd:80:95:57:e0:95: f3:cb:aa:d7:4a:95:16:d2:70:6a:07:02:91:78:ee:dc:05:88: 20:a1:3f:00:e8:22:ed:8d:2a:c1:04:23:e8:cb:aa:15:9d:95: 25:de:6b:fd:ae:ab:7c:c5:a7:49:3c:f7:b4:9a:be:87:a3:da: 5d:15:9d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgFaxqugfp/2PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzNmOWUyZDUtNzA2MS00ZTIyLTk1NTMtNmFlZjQ3YjAwODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfpdLjQcEZPnyycmRQDUBxwK3cH+4k1J/GK 5D3VQHbywmzKAkqJO8DUHtS2uZ4udGG/Iywn1DK2NPB+BYCZeWHb5MGYrPzm6/Jc cYu3wTHRrd/yq9zbY969S3x26nRdLD+qEzdqA6NqMfZAq2IxO9MniZuJTCQ8hTmf f6ZflEIHgGlZsieHouZBGwu6e5Hlwaf8JTuNy2xc45ReSN/KLsSr4O5B2E2r4M0Q BmNVpuW7zUoMdrXFWg5UWyftBik1XS4E3KvJ8r1NRbUjvMpEqdusEAROLK2AWF3g T14szmIfkoMlYpxzPHi7nI+cwsX33+ZyeRS4OWRIItQqyy9xcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM1iOPhaXiIFuCUoj7Xy8jitmixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDVjODhlNDUtZmUyNy0z ZDZjLTk4NjktY2RhZjU3MjcxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGvU+PA7QitR+/di8kMdxJgT2SGyPLuOfHZH0j4pIVsqEaoJLWrLvki 5lzoHbAJdpV4mvV+XkQeAnJnnLDRDcj+90XZmxSCIVZw1/bn8l2ZtKXfZ8wSIR+v +XqMgzefrjp/vBNzHpqKcqEEeBIyJz63UDQg3JIOs9zaFY0b6YQjDMguqPv/QldO +grJE4hUEBSYS1Axnki8YHUiGV+/1dGHMbDKJooRr9SjZ4jwUsjP6Pt8c6wJZQjt uh8jaO38Xf2AlVfglfPLqtdKlRbScGoHApF47twFiCChPwDoIu2NKsEEI+jLqhWd lSXea/2uq3zFp0k897Savoej2l0Vnbw= -----END CERTIFICATE-----Generated at Tue Aug 5 20:03:39 2025 by rpki-client